Parent

Methods

Class/Module Index [+]

Quicksearch

Rex::Post::Meterpreter::Extensions::Stdapi::Railgun::Def::Def_ntdll

Public Class Methods

create_dll(dll_path = 'ntdll') click to toggle source
# File lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb, line 11
def self.create_dll(dll_path = 'ntdll')
        dll = DLL.new(dll_path, ApiConstants.manager)

        dll.add_function('NtClose', 'DWORD',[
                ["DWORD","Handle","in"],
                ])

        dll.add_function('NtCreateFile', 'DWORD',[
                ["PDWORD","FileHandle","inout"],
                ["DWORD","DesiredAccess","in"],
                ["PBLOB","ObjectAttributes","in"],
                ["PBLOB","IoStatusBlock","inout"],
                ["PBLOB","AllocationSize","in"],
                ["DWORD","FileAttributes","in"],
                ["DWORD","ShareAccess","in"],
                ["DWORD","CreateDisposition","in"],
                ["DWORD","CreateOptions","in"],
                ["PBLOB","EaBuffer","in"],
                ["DWORD","EaLength","in"],
                ])

        dll.add_function('NtDeviceIoControlFile', 'DWORD',[
                ["DWORD","FileHandle","in"],
                ["DWORD","Event","in"],
                ["PBLOB","ApcRoutine","in"],
                ["PBLOB","ApcContext","in"],
                ["PBLOB","IoStatusBlock","inout"],
                ["DWORD","IoControlCode","in"],
                ["PBLOB","InputBuffer","in"],
                ["DWORD","InputBufferLength","in"],
                ["PBLOB","OutputBuffer","inout"],
                ["DWORD","OutputBufferLength","in"],
                ])

        dll.add_function('NtOpenFile', 'DWORD',[
                ["PDWORD","FileHandle","inout"],
                ["DWORD","DesiredAccess","in"],
                ["PBLOB","ObjectAttributes","in"],
                ["PBLOB","IoStatusBlock","inout"],
                ["DWORD","ShareAccess","in"],
                ["DWORD","OpenOptions","in"],
                ])

        dll.add_function('NtQueryInformationProcess', 'DWORD',[
                ["DWORD","ProcessHandle","in"],
                ["DWORD","ProcessInformationClass","in"],
                ["PBLOB","ProcessInformation","inout"],
                ["DWORD","ProcessInformationLength","in"],
                ["PDWORD","ReturnLength","inout"],
                ])

        dll.add_function('NtQueryInformationThread', 'DWORD',[
                ["DWORD","ThreadHandle","in"],
                ["DWORD","ThreadInformationClass","in"],
                ["PBLOB","ThreadInformation","inout"],
                ["DWORD","ThreadInformationLength","in"],
                ["PDWORD","ReturnLength","inout"],
                ])

        dll.add_function('NtQuerySystemInformation', 'DWORD',[
                ["DWORD","SystemInformationClass","in"],
                ["PBLOB","SystemInformation","inout"],
                ["DWORD","SystemInformationLength","in"],
                ["PDWORD","ReturnLength","inout"],
                ])

        dll.add_function('NtQuerySystemTime', 'DWORD',[
                ["PBLOB","SystemTime","inout"],
                ])

        dll.add_function('NtWaitForSingleObject', 'DWORD',[
                ["DWORD","Handle","in"],
                ["BOOL","Alertable","in"],
                ["PBLOB","Timeout","in"],
                ])

        dll.add_function('RtlCharToInteger', 'DWORD',[
                ["PBLOB","String","inout"],
                ["DWORD","Base","in"],
                ["PDWORD","Value","inout"],
                ])

        dll.add_function('RtlConvertSidToUnicodeString', 'DWORD',[
                ["PBLOB","UnicodeString","inout"],
                ["PBLOB","Sid","inout"],
                ["BOOL","AllocateDestinationString","in"],
                ])

        dll.add_function('RtlFreeAnsiString', 'VOID',[
                ["PBLOB","AnsiString","inout"],
                ])

        dll.add_function('RtlFreeOemString', 'VOID',[
                ["PBLOB","OemString","inout"],
                ])

        dll.add_function('RtlFreeUnicodeString', 'VOID',[
                ["PBLOB","UnicodeString","inout"],
                ])

        dll.add_function('RtlInitAnsiString', 'VOID',[
                ["PBLOB","DestinationString","inout"],
                ["PBLOB","SourceString","inout"],
                ])

        dll.add_function('RtlInitString', 'VOID',[
                ["PBLOB","DestinationString","inout"],
                ["PBLOB","SourceString","inout"],
                ])

        dll.add_function('RtlLocalTimeToSystemTime', 'DWORD',[
                ["PBLOB","LocalTime","in"],
                ["PBLOB","SystemTime","inout"],
                ])

        dll.add_function('RtlNtStatusToDosError', 'DWORD',[
                ["DWORD","Status","in"],
                ])

        dll.add_function('RtlTimeToSecondsSince1970', 'BOOL',[
                ["PBLOB","Time","inout"],
                ["PDWORD","ElapsedSeconds","inout"],
                ])

        dll.add_function('RtlUniform', 'DWORD',[
                ["PDWORD","Seed","inout"],
                ])

        dll.add_function('RtlUnwind', 'VOID',[
                ["PBLOB","TargetFrame","in"],
                ["PBLOB","TargetIp","in"],
                ["PBLOB","ExceptionRecord","in"],
                ["PBLOB","ReturnValue","in"],
                ])

        return dll
end

[Validate]

Generated with the Darkfish Rdoc Generator 2.